INFO: 

Open Source 

Conversations app is one 
of the best encrypted 
applications for the 
Android system, which 
supports the encryption 
of messages and flies 
through the OMEMO 
protocol. 


Conversations 







Conversations 



All praise to Allah , Lord of the creation . may blessings and peace be 
upon the prophet of mercy and massacre r the cheerful warior and upon 
his family, his companions , and those who follow him 


I 


Conversations 



Open Source Conversations app is one of the best encrypted applications for the 
Android system, which supports the encryption of messages and files through the 
OMEMO protocol. OMEMO uses secure communication between two parties and 
supports Forward Secrecy to create a cryptographic key for every message sent. 
Even if an attacker decrypted a message The attacker can not decrypt other 
messages. The protocol also supports the transmission of encrypted files and 
receiving messages if the other party is not connected to the Internet, which is 
required by the OTR Protocol. Both parties must be connected to the Internet in 
order to receive and send messages Therefore, the OMEMO protocol gives you 
better properties than OTR and OPENPGP 


The difference between the Conversations application and other 
communication applications such as Telegram - What's app : 


It is an open-source application that security researchers can examine and analyze 
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Conversations 


The Conversations application supports secure encryption protocols such as 
OMEMO, OTR and OpenPGP and allows the user to encrypt messages with any of 
the previous protocols 


The Conversations application does not require registration with telephone numbers 
such as Telegram and What's app but allows the user to register via email on various 
XMPP servers 


The Conversations application supports the selection of XMPP servers, allowing 
users to freely select servers to send and receive encrypted messages. In this way it is 
impossible for an attacker to intercept the metadata of your messages before he or she 
penetrates the server first. However, other communication applications such as 
Telegram and What's app force you to use the company's servers, Your data is 
connected to the server, as the message metadata. Facebook and Telegram are able to 
access the content of your message^stored in servers. 


The developer of the Conversations application recently added modifications to the 
application, including the Blind-Trust feature to accept the encryption keys 
automatically and to activate the Omemo protocol by default. It also deleted the OTR 
and OpenPGP from Conversations. Another version of the application, called 
Conversations Legacy, to suit user requirements So F-droid has two versions of 
Conversations 


y 


The official version Conversations 2.0 which has advanced features but includes the 
Omemo encryption protocol 1 ' commend using it) 



/ 


The Conversations Legacy version contains different encryption protocols such as 
OMEMO, OTR and OpenPGP 



Index Explanation: 


1- Conversations2.0 . 


2- Pix-Art Messenger. 


3- Conversations Legacy. 
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Conversations2.0 

- Download the application from the F-droid store 

- To sign up for a new account you can register directly in the Conversations.im 
server by clicking Create Account, but Conversations.im Server gives you 6 months 
free subscription and then you have to buy a subscription, or to choose a free XMPP 
server for registration Click on Use my own provider 


r 
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Conversations 
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- Adjust the application settings before registering 

- Click on the icon shown in the image below 



- Click Settings to access the application settings 
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- Click on OMEMO Encryption to enable the Omemo protocol to always communicate 

!■—-.If nil PI n ll n i\ r 
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4- Settings 


Privacy 


OMEMO Encryption 

OMFMO v^l’jOused t>y default for new conversations 


Confirm iWssages 

Let your contacts know when you have received and read Q 

the*r messages 


Typing notifications 

let your contacts know when you are writing messages 
to them 


Broadcast Last User Interaction 

Let all your contacts know when you use Conversations 


NM M m 


Notifications 

Notify when a new message arrives 


j—cgJ! «o Ia,i a uai 


Notifications from strangers 


Notify (or messages received from strangers ^ 

f;-EHFTS ^SR444TAW 

Heads-up Notifications 

Show Heads-up Notifications 


Vibrate 


- Choose Always 
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SO*-? 011:32 


Settings 



OMEMO Encryption 


DMFMo v.iTf »*iv jyG Le used for oneon*one and 




Confirm Messages 


MMtjUwLcJMUt 


OMEMO Encryption 

® Ajways 
O default 

8 

I O Off by default 


CANC L 


Motify when o new rrmwioe arrives 


j tai l a. mu a ■iU ii jQ 

Notifications from strangers 


... .. 


Heads-up Notifications 

Show Heads up Notifications 
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r: 

1 


SOot? 011:32 


<* Settings 








- Select Automatic Message deletion to automatically delete messages 
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Automatic message deletion 

Automatically delete from this device that are older 

than the configured bnfyAc 


Don't trust system CAs 

All certificates must be manually approved 


Validate hostname with DNSSEC 

Server certificates that contain the validated hostname 
ore considered verified 


Remove certificates 

Delete manually approved certificates 


Allow message correction 

Allow your contacts to retroactively erht their messages 


Delete OMEMO identities 

Regenerate your OMEMO keys. All your contacts will have to 
verify you ogam Use this only os a last resort 


v- Expert settings 


Bmi 


Blind 


Trust 


Before Verification 


Q 


Automatically trust oil new devices of contacts that 
haven't been verified before, and prompt for manual 
confirmation each time o verified contact odds a new 
device 


- Select the automatic deletion time for messages 


•Note 
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Conversations 


The application does not have the self-destructing feature of the conversations so make sure that 
the other party you correspond to also activates these features so that there is no effect of the 

conversations on his phone 



O n:32 


Expert settings 


:*M new devices of com# 
haven’t W<fi«c before, and prompt to*/ 
confirmat»ort'eact. time a vi-riftcd co ntact t 


d- 


Automatic message deletion 

A 

$ 

Never 

1 day 

1 week 

o 

1 month 

o 

6 months 

CANCEL 


Delete OMEMO t 


r AW 


- Select the automatic deletion time for messages 

- You can activate the connection via Tor network only by installing the Orbot 
application 
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8 SO**t 0 11:32 

<r Expert settings 



Connect via Tor 

Tunnel aN connections through the To* network Require^ 
Orbot 


Extended connection settings 

Show hostname and port settings when setting up an LJ 
account 


Oirect Search 

At ‘Start Conversation’ screen open keyboard and place 
cursor m search field 



Enter is send 

Use enter key to send message 


Show enter key 

Change the emoticons key to an enter key 


Scroll to bottom 

Scroll down after sending a message 


- Enable Request Message Receipts to see if the other party has read your messages or 
not 

- Enable Keep Service in Background to always run Conversations and be able to 
receive notifications 
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<* Expert settings 


Set your availability wh^n eoitioQ your status n^^ss&Qe 


Away when screen is off 

Marks you resource as away when the screen *s turned D 


"Do not disturb’ in silent mode 

Marks your resource as *Do not disturb* when device is O 


In silent mode 


Automatically join group chats 

Respect the autojom flag in group chat bookmarks 


Request message receipts 

Received messages will be marked with a green tick if 

supported Jl \ a & A tlftl A 


Keep service in foreground 

Prevents the opef%Hlng system fromMevg your 
connection 


Export history 

Write conversations history logs to SO card 


Registration with XMPP servers : 


You can choose the server you want to register from here, but you should read 
the privacy policy and terms of use of each server to know what information they 
store or collect about you 


- In the Jabber ID box, enter the username and server you want to register to, such as 
Test@draugr.de as shown in the following picture 
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Conversations 


- Enter a strong password consisting of letters, symbols and numbers in the Password 
box 

- Verify that the Register New Account on Server option is enabled 



- Enter the Captcha verification code and press Ok 
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-You can add an image to the accountby clicking on the box icon or selecting Skip to 
ignore adding an image and continuing to use the application 
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Conversations 


012:08 



- The application will ask 
Reject 



access the validity of the contacts. Click Deny or 
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- Click on the icon shown in the following picture to add contacts 

JniC n X rl k 4C n )r0e T > 
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Conversations 


r 


1 

B 4 

tS O ▼ 

J 12:09 



Start Conversation Q. 

r lMp • 

«. : 



CONTACTS GROUP CHATS 




- Add the account you want to connect to 
Horizons@draugr.de and click Create 


in the Jabce 

z2l n 



ID box such as 
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- Click on the icon shown in the picture to send messages 


n 


n 
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- Click the icon shown in the image to go to the settings 


n 


n 


yi 



Electronic Horizons Foundation I is an independent foundation aims to raise Security awareness among Muslims 

Q SR444TAW Q EHFTS Horizons@draugr.de 





Conversations 



- Click Manage accounts to manage your accouni 

nlcwUr^i 


* 
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ti^eaT Q 8 ©CfOSi 

- All the accounts you have registered with will appear in the application. You can 
register more than one account in the Conversations application 

- To register with a new account click on the icon shown in the image below 

- To edit your account data click on the account ID 
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Conversations 


SO»»t J 12:10 



- Click on the icon shown in the i 
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- Select Change Password to change your password 

]ni0lrQS©LnJ8 
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Conversations 


a 



An open source application based on the source code for Conversations, where 
Conversations has some features in the graphical interface, but the protocol for 
encoding (OMEMO) used by Pix-Art is the same encryption protocol used in 
Conversations, so there is no difference between them in terms of security 


- Download the application from the F-droid store 

- Click Advanced Mode to adjust the application settings 


\ 



L5 
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Q B • N O o* T *)5l\12:45 

Pix-Art Messenger 
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- Click Settings to access the application settings 

n in] r Y7 



n 
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- Click Security and Data protection to set the security settings 


lni@u USCeIK) 


V 


•Note 

You can adjust the automatic message deletion settings by going to Expert Settings, 
then Automatic message deletion, and then choosing the duration of the deletion 
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Conversations 



SL51, 




- Click on OMEMO Encryption to enable the Omemo protocol to always 
communicate 
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B 4 N 0**t ' 51X12:46 

<- Security and data protection 



Confirm Messages 

Lei your contacts know when you have received and read S3 

their messages 


Typing notifications 

Let your contacts know when you are writing messages Q 

to them 


Allow message correction 

Allow your contacts to retroactively edit theif messages ^ 


Request message receipts 

Received messages will be marked with a green tick if Q 
supported 


Broadcast Last User Interaction 

Let oil your contacts know when use Prx-Art Messenger 


Warn if chat is unencrypted 

If message encryption is availably you should use it 
If you don't use message encryption, show a warning 




±1 SR444TAW 


OMEMO Enc 

OMEMO v 
conversed * 


be turned on explicitly for new 


Send crash reports 


- Choose Always 
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W 1 

B 4 N 

O Or ▼ 0 Six 12:47 

v” Security 

and data protection 


?t yoor contacts know when you hove received and read 


Typing notifications 

Let your contacts know when you ant wrirogr 


OMEMO Encryption 


(®V^lways 


by default 


O Off by default 

CANCEL 


Warn If chat Is unencrypted 

f message encryption is available, you should use It 
1 1 you dontuse message encryption; show a warning 
message inside the chat 


OMti'/O Encryption 

OMEXtO will always be used for one-orvone and private group 
chats. 


Send crash reports 


- Check that Send Crash Reports is closed to prevent error reports from being sent to 
the developer where they contain your device data 
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Conversations 


f~ 


B * N O o* a < 

0 51 \ 12:47 

<r Security and data protection 



- Click Connect via 
installed) 


Tor to connect to 


the Tor network (Orbot application must be 
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B 4 N 

O o* T £> six 12:48 

<r Expert settings 



o'C consroercc vcnTiixj 


Remove certificates 

Delete manually approved certificates 

Connection options 

Connect via Tor 

Tunnel aH connections through the Tor network. 


Extended connection settings 

Show hostname and port settings when setting up an 
account 



Oirect Search 

At 


Enter is send 

Use enter key to send message 

Show enter key 

Change the emoticons key to an enter key 


Registration in XMPP servers : 


n in II [U74l n I n 

Click on Create Account to register with a new account 


Electronic Horizons Foundation I is an independent foundation aims to raise Security awareness among Muslims 

Q SR444TAW Q EHFTS Horizons@draugr.de 







Conversations 



OB4N O ©* T *>51X12:45 

Pix-Art Messenger 



-You can choose the server you want to register from here, but you should read the 
privacy policy and terms of use of each server to know what information they store or 
collect about you 

- In the initial box, enter your username. 

- Then choose the server you want to register from the icon shown in the next image 
and then click Next 
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© or T *>S0\ 12:53 


<- Create new account 



- The user name and password generated by the application. Change the password to 
your own password with numbers, letters and symbols and click Next 
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B 6 N e»*? (0 sox 12:53 

<- Create new account : 



-You can add an image to the accountby clicking on the box icon or selecting Skip to 
ignore adding an image and continuing to use the application 
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B 4 N 



'0 50 * 12:54 

<- 

Publish avatar 




- The application will ask 
Reject 



access the validity of the contacts. Click Deny or 
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B 4 N O O* V 15 ® 50% 12.54 

Start Conversation : 



- Click on the icon shown in the following picture to add contacts 


n 


C 


n 
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m 

B 4 N 

o»*? 

»> SOX 12:54 


Start Conversation 

0. 

r nr 5 


CONTACTS 

GROUP CHATS 




- Add the account you want to connect to 
Horizons@draugr.de and click Create 


in the Jabber ID box such as 
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Conversations 


f~ 


B 4 N 

(*) sox 12.54 

Start Conversation 

Q. :«C : 

CONTACTS 

GROUP CHATS. ' 



- Click the icon shown in the image to go to the settings 


n 


n 


yi 
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Conversations 




- Then select Manage Accounts to manage accounts 

0@©)S@LN© 
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-You will be able to register more than one account in the Pix-Art application by 
clicking the Image result for add icon 

-To edit your account details click on the account ID as shown in the following 
picture 
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- To change Account Password Click on the Related 
Password box and click Save 


Lage icon or through the 
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r 

'I 

a 4 n 

0»>t *> SOX 13.00 

<r ACC... 

0 < E! * ©* : 



T 


JibbfMO 

teston7@dismail.de 



Pytwwd II | t ^ii » a T, 




_ n . r ^ 

R444TAW. 


Battery optimizations enabled 

CANCEL 




n 
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$ 

^ * 


Conversations Legacy 


The Conversations Legacy version contains multiple encryption protocols but 
lacks important features such as the Omemo activation feature automatically in 
conversations so we recommend using Conversations 2.0 instead of Conversations 
Legacy 


- Download the application from F-Droid store 

- Choose My Own Provider to select XMPP servers 




L5? 
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- Click Register new account on server and type the username you want like 
Ahmed@creep.im or Ahmed@Chatwith.xyz 

•Note 


Type in the bottom of Jabber ID the email you want to create, and the range ends with 
@ Chatwith.xyz like what is shown in the following picture and then type a strong 
password consisting of small letters and large numbers and symbols and then click 

Next 
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CD 0 » 0 r ’£• ^ 1; .,|| 37%i 1:56 PM 

<- Add account : 



- Wait for the app to finish creating your account 


- If you want to add an image to the account click on the blue box and select the 
image and then press Publish or click Skip to ignore this step 
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- Example 
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<- Publish avatar 

n 




Activation of the OMEMO encryption protocol : 


- Click on the icon shown in the following picture to add other people 
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Start Conversation Q> +.1 : 



- Add the email of the person you want to add and click Create 

IniCE) IF U C5 Ce) uue: 
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- Make sure to activate the options shown in the following image 

I r~] mj I r I V71 mj Pm a \ 
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4- ama ✓' <C : 




JkELATU Z6 (E)U\)e3 

- When you add a person to the Conversations application, you must accept the 
extension as shown in the following image, so click Add Back 
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<- ama 


Q @J : 



*isi ,— - — 

icon 



- Then click on the lock icon shown in the following image 
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<- ama ti @1 : 



- Then select the OMEMO encryption protocol 

•Note 


The two parties must be connected to the Internet when the OMEMO protocol is 
activated for the first time. This type of encryption is between two parties (you are 
one and the other party you want to contact is the other party) and the server has no 
connection to encryption. The server can not represent any of the parties. In the 

creation of encryption 
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<r ama 

& @1 i 

1 



following image 
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n 


'/fn 


)\ 


\ 


- The digital fingerprint of the OMEMO encryption key will appear then press Done 


•Note 


The encryption key must be accepted to start encrypted messaging between the parties 
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<- Trust OMEMO Fingerprints 



jm 

- Click on the location shown i 


HTt 


Adjust settings : 

bllowing pict 
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Start Conversation Q. +.£, : 



- Then click Settings 
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C8 Q d p Q 

^ H .ill 38% a 1:58 PM 


Start Conversati 

Scan QR code 


CONTACTS 

Hide offline 
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<r Settings 


Use green background for received messages 


Increase font size 

Use larger font sizes across the entire app 


Send button indicates status 

Colorize send button to indicate contact status 


Quick Action 

Replace send button with quick action 


Show dynamic tags 

Display read-only tags underneath contacts 


Expert settings 

Please be careful with these 


Never send crash reports 

By sending in stack traces you are helping the 
ongoing development of Conversations 


About Conversations 

Conversations 1.14.9 


- Enable the Do not Save Encrypted Messages option to prevent encrypted messages 
from being stored on the device to make the application deletes encrypted messages as 
soon as the application is closed 

- Then enable Do Not Trust System CAs option to prevent the application from 
trusting the certificates of the operating system servers 
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Expert settings 



Also activate the automatic message de 1 


3®TfvlSi 

etion option 
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Expert settings 







- And the duration of the deletion is 24 hours as a minimum 



•Note 

The messages will be deleted by only one "sender" and not from both parties 
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- If you are a Tor enthusiast do the Connect via TOR option to link the application 
connection to the Tor network through the Orbot application 
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Expert settings 






Connection 

Connect via Tor 

Tunnel all connections through the Tor network. 
Requires Orbot 


Extended connection settings 

Show hostname and poet settings when setting up 
on account 


Enter is send 

Use enter key to send message 


Show enter key 

Change the emoticons key to an enter key 


Presence 

Manually change presence 

Touch your avatar to change your presence 


\L5 





n 




n 




You can communicate securely with us through the following account on the 

Conversations application 


I Horizons @ draugr.de ) 
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